CVE-2009-3664 - Multiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to include or execute arbitrary files via a .

Back Back to CVE browser

HIGH

Multiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to include or execute arbitrary files via a .

Published Oct 11, 2009

7.5

HIGH

CVSS 2.0

EPSS 5.97%

Description

Multiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to include or execute arbitrary files via a .. (dot dot) in the (1) p and (2) s parameters.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (6)

http://secunia.com/advisories/36648
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/9625
exploitx_refsource_EXPLOIT-DB
http://www.osvdb.org/57919
vdb-entryx_refsource_OSVDBExploit
http://www.securityfocus.com/archive/1/506380/100/0/threaded
mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3639
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/53217
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/36648		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/9625		exploitx_refsource_EXPLOIT-DB
http://www.osvdb.org/57919		vdb-entryx_refsource_OSVDBExploit
http://www.securityfocus.com/archive/1/506380/100/0/threaded		mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3639		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/53217		vdb-entryx_refsource_XF